
$ rpki-client -vvf rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
File: F23594312FE527F86185AE38CC16265280FD40FA.mft (raw, json)
Hash identifier: HxF0NXbOgq3Rd3MDVSpvNPHaXQoqjnw8/kmBJiQe2yM=
Subject key identifier: D8:62:12:5B:1D:01:EC:EE:BF:F1:7A:1F:04:67:C9:B0:00:26:01:34
Authority key identifier: F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA
Certificate issuer: /CN=F23594312FE527F86185AE38CC16265280FD40FA
Certificate serial: 1F582532F82C8332B3F5C84E20CB7347B834B988
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 09:31:34 +0000
Manifest this update: Thu 23 Jul 2026 09:26:34 +0000
Manifest next update: Fri 24 Jul 2026 11:31:34 +0000
Files and hashes: 1: F23594312FE527F86185AE38CC16265280FD40FA.crl (hash: Hgp5VzMdf4+eL4Nxy6dtF7LNYuXLF+0GHj5I+kZooOo=)
2: 3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa (hash: 7MJm9/1g/gkw58AS1qnqSYx9VaW3KBNo5zcIcw63iro=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.crl
rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 11:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:58:25:32:f8:2c:83:32:b3:f5:c8:4e:20:cb:73:47:b8:34:b9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F23594312FE527F86185AE38CC16265280FD40FA
Validity
Not Before: Jul 23 09:26:34 2026 GMT
Not After : Jul 24 11:31:34 2026 GMT
Subject: CN=D862125B1D01ECEEBFF17A1F0467C9B000260134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:60:a2:2a:8c:76:0d:4c:65:33:25:b7:b1:79:
92:d5:9a:7f:5c:e2:f9:6b:bb:d6:2c:93:cf:7c:3c:
6d:cd:41:37:f0:14:ae:6a:f5:24:51:9e:e9:c6:e8:
48:c6:1e:85:5d:ba:e2:39:c7:cc:4c:9a:9f:20:3d:
02:56:03:ad:85:9b:78:9b:8f:d1:1e:0c:89:4c:43:
9b:09:42:15:61:a4:d1:01:7b:f4:d8:bc:ea:a2:1f:
1f:a9:74:07:78:cd:72:97:87:9a:f5:6f:2f:61:00:
e5:81:1b:6a:9c:ee:e2:2e:a1:d7:98:6a:c9:0a:c6:
8a:7a:e9:a9:5c:44:14:4a:f0:9b:cd:cf:7a:a8:af:
5c:8f:1a:79:e6:04:08:e7:88:62:0c:c2:b0:1d:f3:
46:27:63:87:f1:ff:59:83:26:fc:6b:bc:5e:6a:69:
e0:e9:7f:62:d0:c6:7b:9f:d9:3e:4d:00:32:c4:b1:
3e:87:c3:66:1d:c6:53:2d:36:e6:33:a1:f9:07:55:
8d:df:ab:96:d1:95:24:46:41:d4:34:ca:b2:52:da:
70:81:b0:cf:39:94:64:ed:21:a1:03:e6:9f:1b:8a:
5d:ef:4f:8b:49:01:55:30:89:bd:eb:12:c8:b5:fc:
d2:e0:ca:b0:e3:2f:cd:43:e1:66:18:ee:18:3b:2c:
c7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:62:12:5B:1D:01:EC:EE:BF:F1:7A:1F:04:67:C9:B0:00:26:01:34
X509v3 Authority Key Identifier:
keyid:F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a3:40:c8:04:e7:fe:d2:a9:52:71:bf:42:18:32:d7:9b:63:
25:4b:16:b9:47:6e:d4:d9:9f:3e:2f:e0:da:79:ca:92:d0:8e:
be:0c:98:56:ed:67:6c:57:00:a8:d3:fe:7c:72:06:c1:ab:80:
aa:f6:83:75:90:52:33:8e:8d:79:f8:df:ab:dd:8e:26:37:6b:
8e:79:ba:98:94:e5:19:19:a9:1b:d8:b1:cb:98:b9:55:d6:68:
44:b7:90:88:f9:b8:a2:48:53:9f:3d:13:c3:83:f4:5d:d7:d7:
40:96:6e:f3:1e:78:20:46:d3:7e:0f:14:58:ba:cb:e5:ad:6a:
48:1c:2f:69:0e:0d:64:dd:01:44:c6:33:da:18:b8:30:d1:f5:
a3:3f:5f:1e:c0:c1:e6:6f:ca:9e:8d:a9:e6:f4:55:c3:1c:50:
46:96:e0:07:91:92:4c:91:fd:aa:de:af:40:37:49:3d:6b:8d:
73:07:eb:d1:b7:5e:ea:18:f8:f4:81:8c:84:60:65:b5:ae:1a:
95:a5:f2:ca:25:f0:f2:b9:46:8e:e8:4e:23:74:91:e9:fd:6b:
8a:55:6f:fb:ef:2d:9e:c0:53:e4:6e:70:12:83:95:de:17:9e:
43:38:de:7f:05:e6:04:85:a9:29:31:37:79:92:34:c6:6b:3a:
f7:e6:2e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:27 2026 by rpki-client